$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: Vnsa5PjLFvcbHOsH+kg/a95Njjqjj5j8P1g6zqKcJmc= Subject key identifier: C1:2C:9D:DE:0D:E4:0B:5F:7F:63:7F:80:FF:3D:E4:9D:77:C3:C7:5A Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019D273A8163C8875D421CB671405083CE6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 18B4 Signing time: Wed 25 Mar 2026 23:00:38 +0000 Manifest this update: Wed 25 Mar 2026 23:00:38 +0000 Manifest next update: Thu 26 Mar 2026 23:00:38 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: 3PP5cZHpE54hIGtHp8kbYyxaZFQ.roa (hash: H82bfxWmiHNRJ1H7gR7ROjYOhxBbx/o5pU/AxcHnke8=) 6: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 7: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 8: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 9: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 10: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 11: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 12: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 13: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=) 14: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 15: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: fiNSw/aqJBG8ih911bXKvCQBz6ZhyXJTBxcmV/sVpik=) 17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3a:81:63:c8:87:5d:42:1c:b6:71:40:50:83:ce:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Mar 25 23:00:38 2026 GMT Not After : Mar 26 23:00:38 2026 GMT Subject: CN=c12c9dde0de40b5f7f637f80ff3de49d77c3c75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4a:cb:3a:9f:d0:98:39:52:e4:6b:01:e2:2e: 3d:2e:20:4f:db:99:44:a1:46:77:a5:74:2f:0f:36: 60:01:52:50:45:d6:cf:16:d5:b4:69:cb:a4:ef:0f: 51:ae:c8:3d:dd:ed:ff:ea:4d:0c:89:93:08:f4:17: da:64:3d:cd:7a:fe:a8:d4:9c:c9:29:8a:4b:ac:79: 98:71:49:b8:19:aa:0f:29:51:d9:d8:e2:3a:12:65: 53:ab:1f:80:03:b9:2f:3e:b7:c8:42:45:ed:a9:22: f2:eb:b3:53:59:f7:38:09:ff:65:f0:f6:5d:50:61: 05:5e:ef:d8:08:f0:bf:49:c6:61:e9:b9:11:a9:2b: 1c:39:c6:95:d4:84:77:86:1e:a7:1f:5b:36:86:db: 12:03:77:30:28:20:a9:c3:f5:76:60:4f:55:f7:35: bd:44:49:1b:82:e5:4b:14:c7:8e:c0:16:bc:6b:32: e6:38:84:94:50:b5:9b:1b:4d:04:84:df:6b:6d:a9: 3a:72:a7:30:e4:14:ab:db:fa:5a:57:3f:db:7d:2e: e1:5c:7a:6f:3b:ad:3d:9d:6e:58:77:dd:a9:ad:07: 50:89:f1:8c:08:50:b1:c3:c2:8c:cc:1b:38:3e:3a: 3e:dc:0b:38:7f:75:47:30:10:7f:7d:59:48:74:32: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2C:9D:DE:0D:E4:0B:5F:7F:63:7F:80:FF:3D:E4:9D:77:C3:C7:5A X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ac:a5:d1:81:85:d9:47:b7:63:a0:b6:5f:e4:e7:9e:fc:69: eb:e1:4b:f3:23:65:ab:ac:42:61:7f:42:c8:5d:a9:60:73:55: b2:b2:ec:ca:dd:e9:ed:64:d0:1e:9d:76:04:b5:b9:bb:f2:1e: 4a:30:2e:1b:02:20:27:aa:11:18:a7:74:e7:12:a1:57:dc:4b: eb:45:fc:05:c7:ce:46:ff:53:14:ae:80:65:04:ea:34:47:75: ae:fa:04:1b:e4:7a:23:44:b2:4c:d8:39:46:1c:be:cd:63:c8: bb:b1:45:f5:11:94:1c:80:a1:79:0d:48:97:83:b8:86:b3:33: f9:9b:00:43:98:43:e3:af:0a:e7:2c:64:c5:7b:4a:43:fd:09: 49:ce:cd:09:df:56:5b:d1:d7:ec:c1:cb:d9:d0:06:54:61:ca: 33:a0:58:5b:66:65:1a:19:e2:f9:4a:01:aa:4f:4b:70:ab:2f: 3b:4c:04:98:c3:1e:d2:3f:b3:51:0e:fd:89:b6:50:5a:8e:d6: 94:6a:3f:2d:20:00:b9:ce:7d:9d:0e:fe:bd:dd:50:2c:e0:11: 57:ff:c8:98:25:c2:6b:1a:c2:e2:cf:a7:9c:6f:05:81:23:c7: e5:39:54:fd:bf:12:85:0a:ca:58:7b:7d:a1:34:7d:4c:9d:ee: 71:1f:e3:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOoFjyIddQhy2cUBQg85uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMzI1MjMwMDM4WhcNMjYwMzI2MjMwMDM4WjAzMTEwLwYDVQQD EyhjMTJjOWRkZTBkZTQwYjVmN2Y2MzdmODBmZjNkZTQ5ZDc3YzNjNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0rLOp/QmDlS5GsB4i49LiBP25lE oUZ3pXQvDzZgAVJQRdbPFtW0acuk7w9Rrsg93e3/6k0MiZMI9BfaZD3Nev6o1JzJ KYpLrHmYcUm4GaoPKVHZ2OI6EmVTqx+AA7kvPrfIQkXtqSLy67NTWfc4Cf9l8PZd UGEFXu/YCPC/ScZh6bkRqSscOcaV1IR3hh6nH1s2htsSA3cwKCCpw/V2YE9V9zW9 REkbguVLFMeOwBa8azLmOISUULWbG00EhN9rbak6cqcw5BSr2/paVz/bfS7hXHpv O609nW5Yd92prQdQifGMCFCxw8KMzBs4Pjo+3As4f3VHMBB/fVlIdDKlGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEsnd4N5Atff2N/gP895J13w8daMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6yl0YGF 2Ue3Y6C2X+Tnnvxp6+FL8yNlq6xCYX9CyF2pYHNVsrLsyt3p7WTQHp12BLW5u/Ie SjAuGwIgJ6oRGKd05xKhV9xL60X8BcfORv9TFK6AZQTqNEd1rvoEG+R6I0SyTNg5 Rhy+zWPIu7FF9RGUHICheQ1Il4O4hrMz+ZsAQ5hD468K5yxkxXtKQ/0JSc7NCd9W W9HX7MHL2dAGVGHKM6BYW2ZlGhni+UoBqk9LcKsvO0wEmMMe0j+zUQ79ibZQWo7W lGo/LSAAuc59nQ7+vd1QLOARV//ImCXCaxrC4s+nnG8FgSPH5TlU/b8ShQrKWHt9 oTR9TJ3ucR/jaA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:17:32 2026 by rpki-client